Lucene search
+L

606 matches found

Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.16 views

PT-2024-22746 · Unknown · Relywp Coupon Affiliates

Name of the Vulnerable Software and Affected Versions: RelyWP Coupon Affiliates versions through 5.12.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions throu...

7.1CVSS9.3AI score0.00398EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/03/16 12:00 a.m.24 views

WordPress Coupon Affiliates Plugin <= 5.12.7 is vulnerable to Cross Site Scripting (XSS)

Software Coupon Affiliates Type Plugin Vulnerable versions = 5.12.7 Fixed in 5.12.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29125 Patch priority Medium CVSS severity Medium 7.1 Developer RelyWP PSID 81253acd1aca Credits stealthcopter Required privilege...

7.1CVSS6.5AI score0.00398EPSS
SaveExploits0References2Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/03/16 12:00 a.m.17 views

VulnCheck KEV: CVE-2024-29125

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage.This issue affects Coupon Affiliates: from n/a through = 5.12.7...

7.3AI score0.00398EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2024/02/28 12:00 a.m.22 views

WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit <= 1.0.9 - Unauthenticated Sensitive Information Exposure

Description The WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data...

5.3CVSS6.7AI score0.00443EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/26 4:27 p.m.12 views

CVE-2024-1436

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9...

5.3CVSS7.3AI score0.00443EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/26 4:27 p.m.31 views

CVE-2024-1436

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9...

5.3CVSS5.2AI score0.00443EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/26 4:27 p.m.17 views

Code injection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9...

5CVSS7.1AI score0.00443EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/26 3:55 p.m.40 views

CVE-2024-1436 WordPress WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Plugin <= 1.0.9 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9...

5.3CVSS5.5AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/26 3:55 p.m.21 views

CVE-2024-1436 WordPress WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Plugin <= 1.0.9 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit.This issue affects WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit: from n/a through 1.0.9...

5.3CVSS7.1AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/26 3:55 p.m.129 views

CVE-2024-1436

CVE-2024-1436 affects the WordPress plugin set “WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit,” exposing sensitive data to unauthorized actors via unauthenticated access. The vulnerability impacts versions up to 1.0.9 (no fixed version listed in the provided data). Connected RH/Wordfen...

5.3CVSS6.7AI score0.00443EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/26 12:00 a.m.13 views

PT-2024-18046 · Wiloke · Wiloke Woocommerce Coupon Popup

Name of the Vulnerable Software and Affected Versions: Wiloke WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit versions 1.0.9 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This could potentially allow access to confidentia...

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.11 views

WordPress Plugin WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WooCommerce Coupon Popup,...

5.3CVSS6.2AI score0.00443EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/02/26 12:00 a.m.15 views

WordPress WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Plugin <= 1.0.9 is vulnerable to Sensitive Data Exposure

Software WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Type Plugin Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-1436 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8b17a4bc28...

5.3CVSS6.5AI score0.00443EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/02/12 7:15 a.m.32 views

CVE-2024-25100

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4...

10CVSS9.6AI score0.00767EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/12 7:15 a.m.11 views

CVE-2024-25100

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4...

9.8CVSS7.3AI score0.00767EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/12 7:15 a.m.28 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2...

7.5CVSS7.2AI score0.00767EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/12 7:04 a.m.21 views

CVE-2024-25100 WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4...

10CVSS8.4AI score0.00767EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/12 7:04 a.m.42 views

CVE-2024-25100 WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4...

10CVSS9.6AI score0.00767EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/12 7:04 a.m.70 views

CVE-2024-25100

CVE-2024-25100 is a Deserialization of Untrusted Data vulnerability in the WordPress Coupon Referral Program plugin (coupon-referral-program) affecting versions up to 1.7.2 (n/a before 1.8.4 per sources). The issue is an unauthenticated PHP object injection vulnerability in WP Swings Coupon Refer...

10CVSS8.6AI score0.00767EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/02/12 12:00 a.m.16 views

WordPress Plugin Coupon Referral Program Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

10CVSS7AI score0.00767EPSS
SaveExploits0References4
Rows per page
Query Builder